diff --git a/src/wp-includes/class-wp-theme.php b/src/wp-includes/class-wp-theme.php index b373307402..77927d3881 100644 --- a/src/wp-includes/class-wp-theme.php +++ b/src/wp-includes/class-wp-theme.php @@ -737,8 +737,9 @@ final class WP_Theme implements ArrayAccess { private function markup_header( $header, $value, $translate ) { switch ( $header ) { case 'Name' : - if ( empty( $value ) ) - $value = $this->get_stylesheet(); + if ( empty( $value ) ) { + $value = esc_html( $this->get_stylesheet() ); + } break; case 'Description' : $value = wptexturize( $value );